SAA-C03 Q264 · Security

Question

A company stores data in Amazon S3. According to regulations, the data must not contain personally identifiable information (PII). The company recently discovered that S3 buckets have some objects that contain PII. The company needs to automatically detect PII in S3 buckets and to notify the company’s security team. Which solution will meet these requirements?

Accepted Answer

**Answer A is correct for three specific reasons:**

1. **Right service — Amazon Macie**: Macie is purpose-built for discovering and protecting sensitive data in Amazon S3. It uses machine learning and pattern matching to automatically detect PII (names, credit card numbers, SSNs, etc.) stored in S3 objects. This directly addresses the requirement to 'automatically detect PII in S3 buckets.'

2. **Right event type — SensitiveData**: When Macie discovers sensitive data, it generates findings with event types categorized under `SensitiveData`. The main categories are:
   - `SensitiveData:S3Object/Personal` — personally identifiable information
   - `SensitiveData:S3Object/Financial` — financial data
   - `SensitiveData:S3Object/Credentials` — credentials
   - `SensitiveData:S3Object/Multiple

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips